General

  • Target

    c105f38b01bb5fe08af47042fc7ed60e923ba5357f1d68d48109a3ed5c55e91e

  • Size

    298KB

  • Sample

    241110-bt6chawjcv

  • MD5

    0dde205094c94dca59f587e88f965a25

  • SHA1

    24987d80bea4dc8b03a0b9488f36a94379239937

  • SHA256

    c105f38b01bb5fe08af47042fc7ed60e923ba5357f1d68d48109a3ed5c55e91e

  • SHA512

    f045c700c603f4f3fa96960cb92b4ccdfa499d3e5e294367609cd0c9c5719c4d7b370ce2ed3dde3e01b7b548dd4a689f159d615c7fa24d0bfcd9af31e6e351ea

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c105f38b01bb5fe08af47042fc7ed60e923ba5357f1d68d48109a3ed5c55e91e

    • Size

      298KB

    • MD5

      0dde205094c94dca59f587e88f965a25

    • SHA1

      24987d80bea4dc8b03a0b9488f36a94379239937

    • SHA256

      c105f38b01bb5fe08af47042fc7ed60e923ba5357f1d68d48109a3ed5c55e91e

    • SHA512

      f045c700c603f4f3fa96960cb92b4ccdfa499d3e5e294367609cd0c9c5719c4d7b370ce2ed3dde3e01b7b548dd4a689f159d615c7fa24d0bfcd9af31e6e351ea

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks